PantherLabs
Detection as Code (detection-as-code)
The same way infrastructure as code and configuration-as-code are about machine-readable specification files and descriptive models for constructing infrastructure at scale, detection-as-code is a methodical, flexible, and complete approach to threat detection driven by software.
All terms
data lake
Data Lake
SIEM
Security Information and Event Management
SIM
Security Information Management
SEM
Security Event Management
detection-as-code
Detection as Code
zero-ops
Zero Operations
Create your own glossaries
Build your own glossaries, share them with your colleagues or friends and show them directly in the browser with our extension.
Get Started
NoOps
No Operations
cloud-first
Cloud-first
Python
Python Programming Language
CI
Continuous integration
CD
Continuous delivery
data warehouse
Data Warehouse
SaaS
Software as a service
on-premise
On-premises software
IoC
Indicator of compromise
IP
IP address
IdP
Identity Provider
AWS
Amazon Web Services
S3
Amazon S3
ALB
Application Load Balancer
JSON
JavaScript Object Notation
MITRE ATT&CK
MITRE Adversarial Tactics, Techniques, and Common Knowledge
CIS
Center for Internet Security
SOAR
Security Orchestration, Automation and Response
CloudTrail
AWS CloudTrail
VPC
Virtual private cloud
IAM
AWS Identity and Access Management
SSH
Secure Shell
ETL
Extract, transform, load
SQL
Structured Query Language
Log4j
Apache Log4j
CVE
Common Vulnerabilities and Exposures
RCE
Remote code execution
MDC
Mapped Diagnostic Context
JNDI
Java Naming and Directory Interface
DMZ
Demilitarized Zone
CISA
Cybersecurity and Infrastructure Security Agency
LDAP
Lightweight Directory Access Protocol
FQDN
Fully Qualified Domain Name
WAF
Web application firewall
TCP
Transmission Control Protocol
UDP
User Datagram Protocol
ACK
Acknowledgement
IaC
Infrastructure as Code